On Mon, Aug 10 2020, Ross L Richardson <open...@rlr.id.au> wrote:
> Leo,
>
> On Mon, Aug 10, 2020 at 08:46:19AM +0200, Leo Unglaub wrote:
>> Hey,
>> i love your patch. The current behavour always bothered me because it caused
>> servers to display "wrong" sites as defaults for all requests missing the
>> Host header. I really like your patch and it works fine for me on my
>> servers.
>>[...]
>
> Thanks for testing.
>
> I forgot to mention that, by requiring an exact match, the patch should
> fix the port problem [see below] too.
>
> The problem:
>       $ printf "HEAD / HTTP/1.0\r\nHost: www.openbsd.org:22\r\n\r\n" \
>           | nc www.openbsd.org 80 | sed 1q
>       HTTP/1.0 200 OK

If you consider that a problem.  For example apache ignores any
client-provided port number.

  https://httpd.apache.org/docs/2.4/vhosts/details.html#namebased

-- 
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE

Reply via email to